582ad51b14aec27c377e94075c8f7acb_JaffaCakes118

General

Target
582ad51b14aec27c377e94075c8f7acb_JaffaCakes118
Size 406KB
Sample240519-c7nv2see98
SHA256 2de6bde148b9a42a65f5dae36c903811e56d702d7d319900877f2d5d74273236
MD5 582ad51b14aec27c377e94075c8f7acb
SHA1 821f9c75558339044a1491db3165d5445b0a3f06
SHA512 a25fa0130b6a78deeaa3941a513a3da8aaa60d2439f1224274d8d7f290bf7cd4463c63678e8270ad8e89c70a7927302d9da427df51dcf5fb970d195c947c2fad
SSDEEP 6144:MU/OLpMfqR6vtVIgyPFiChgkX7WOMeLpebnZgUe4A29pNwz:MU/OLCftLqPACIeoFa4A29Dwz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
582ad51b14aec27c377e94075c8f7acb_JaffaCakes118

File Explorer

582ad51b14aec27c377e94075c8f7acb_JaffaCakes118

.dll 406KB

582ad51b14aec27c377e94075c8f7acb_JaffaCakes118

IMPHASH c6999771217f1216d96e792ac4717a66
SHA256 2de6bde148b9a42a65f5dae36c903811e56d702d7d319900877f2d5d74273236
MD5 582ad51b14aec27c377e94075c8f7acb
SHA1 821f9c75558339044a1491db3165d5445b0a3f06
SHA512 a25fa0130b6a78deeaa3941a513a3da8aaa60d2439f1224274d8d7f290bf7cd4463c63678e8270ad8e89c70a7927302d9da427df51dcf5fb970d195c947c2fad
SSDEEP 6144:MU/OLpMfqR6vtVIgyPFiChgkX7WOMeLpebnZgUe4A29pNwz:MU/OLCftLqPACIeoFa4A29Dwz
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

163888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\9\Similar\7\82\Listen\22\17\2\Sleep\92\toward\39\89\live.pdb

kernel32

VirtualProtectEx Sleep TlsAlloc TlsSetValue GetModuleFileNameA GetModuleHandleA GetEnvironmentVariableA GetSystemDirectoryA GetTempPathA GetWindowsDirectoryA RemoveDirectoryA CloseHandle DecodePointer GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle GetStringTypeW SetFilePointerEx GetFileSizeEx FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount TlsGetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind InterlockedFlushSList GetLastError EncodePointer FreeLibrary LoadLibraryExW GetModuleFileNameW GetModuleHandleExW GetStdHandle GetFileType WriteConsoleW HeapAlloc HeapValidate GetSystemInfo ExitProcess WriteFile OutputDebugStringW LCMapStringW HeapFree HeapReAlloc HeapSize HeapQueryInformation GetProcessHeap CreateFileW

msacm32

acmStreamUnprepareHeader acmStreamPrepareHeader acmStreamConvert acmStreamMessage acmStreamReset acmStreamSize acmStreamClose acmStreamOpen acmFilterChooseA acmFilterEnumA acmFilterDetailsA acmFilterTagEnumA acmFilterTagDetailsA acmFormatChooseA acmFormatSuggest acmFormatEnumA acmFormatDetailsA acmFormatTagEnumA acmFormatTagDetailsA acmDriverPriority acmDriverOpen acmDriverRemove acmMetrics acmGetVersion

Sharing

General

Malware Config

Signatures

File Explorer

582ad51b14aec27c377e94075c8f7acb_JaffaCakes118

kernel32

msacm32

generic